SONARJAVA-6296 Configure Renovate#5587
Conversation
|
Renovate Jira issue ID: SONARJAVA-6295 |
Summary
This PR adds the Renovate configuration file (
Once merged, Renovate will begin creating dependency update PRs on a schedule (before 6am Monday) for the Maven and GitHub Actions dependencies detected across the repository. What reviewers should knowFor reviewers:
|
![sonar-review-alpha[bot]](https://avatars.githubusercontent.com/in/3025063?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
tomasz-tylenda-sonarsource
changed the title
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as resolved.
This comment was marked as resolved.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
tomasz-tylenda-sonarsource
force-pushed
the
renovate/configure
branch
from
cd7673c to
2c7b41b
Compare
|
| packageRules: [ | ||
| { | ||
| matchPackageNames: [ | ||
| "org.sonarsource.sslr*" |
There was a problem hiding this comment.
The pattern org.sonarsource.sslr* will not match the actual Maven artifacts in this repo.
In Renovate, Maven package names are represented as groupId:artifactId (e.g. org.sonarsource.sslr:sslr-core, org.sonarsource.sslr:sslr-testing-harness). A bare * does not span the : separator — the SLF4J rule in this same file proves this: it uses org.slf4j:** with an explicit :** to match across the colon. Without that, the SSLR grouping rule will silently never match anything, and SSLR updates will arrive as individual PRs rather than grouped.
| "org.sonarsource.sslr*" | |
| "org.sonarsource.sslr:**" |
- Mark as noise
2 participants
Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
📚 See our Reading List for relevant documentation you may be interested in reading.
🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to
renovate.jsonin this branch. Renovate will update the Pull Request description the next time it runs.Detected Package Files
.github/actions/orchestrator-cache/action.yml(github-actions).github/actions/upload-actual/action.yml(github-actions).github/workflows/PrepareNextIteration.yml(github-actions).github/workflows/PullRequestClosed.yml(github-actions).github/workflows/PullRequestCreated.yml(github-actions).github/workflows/ReleasabilityCheck.yml(github-actions).github/workflows/RequestReview.yml(github-actions).github/workflows/SubmitReview.yml(github-actions).github/workflows/ToggleLockBranch.yml(github-actions).github/workflows/UpdateRuleMetadata.yml(github-actions).github/workflows/automated-release.yml(github-actions).github/workflows/build.yml(github-actions).github/workflows/cleanup-cache.yml(github-actions).github/workflows/dogfood.yml(github-actions).github/workflows/mark-prs-stale.yml(github-actions).github/workflows/pr-cleanup.yml(github-actions).github/workflows/releasability.yaml(github-actions).github/workflows/release.yml(github-actions).github/workflows/unified-dogfooding.yml(github-actions)check-list/pom.xml(maven)external-reports/pom.xml(maven)its/autoscan/pom.xml(maven)its/plugin/plugins/java-extension-plugin/pom.xml(maven)its/plugin/plugins/pom.xml(maven)its/plugin/pom.xml(maven)its/plugin/tests/pom.xml(maven)its/pom.xml(maven)its/ruling/pom.xml(maven)its/vibebot/pom.xml(maven)java-checks-aws/pom.xml(maven)java-checks-common/pom.xml(maven)java-checks-testkit/pom.xml(maven)java-checks/pom.xml(maven)java-frontend/pom.xml(maven)java-jsp/pom.xml(maven)java-surefire/pom.xml(maven)pom.xml(maven)sonar-java-plugin/pom.xml(maven).github/workflows/PrepareNextIteration.yml(regex).github/workflows/build.yml(regex).github/workflows/unified-dogfooding.yml(regex)Configuration Summary
Based on the default config's presets, Renovate will:
fixfor dependencies andchorefor all others if semantic commits are in use.node_modules,bower_components,vendorand various test/tests (except for nuget) directories.CET.What to Expect
With your current configuration, Renovate will create 9 Pull Requests:
Update dependency org.springframework:spring-webmvc to v6 [SECURITY]
renovate/maven-org.springframework-spring-webmvc-vulnerabilitymaster6.1.14Update GitHub Actions dependencies
renovate/github-actions-dependenciesmaster93cb6efe18208431cddfb8368fd83d5badbf9bfd34e114876b0b11c390a56381ad16ebd13914f8d55bef64f19d7facfb25b37b414482c7164d639639ea165f8d65b6e75b540449e92b4886f43607fa02fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3Update Analyzer Commons to v2.22.0.4796
renovate/analyzer-commonsmaster2.22.0.47962.22.0.47962.22.0.47962.22.0.47962.22.0.47962.22.0.4796Update Maven dependencies
renovate/maven-dependenciesmaster3.5.02.14.02.22.06.2.185.14.433.6.0-jre3.6.21.7.361.7.365.23.05.23.00.8.141.3.103.2.21.13.03.6.13.6.39.0.1173.15.0Update Sonar dependencies
renovate/sonar-dependenciesmaster10.47.0.8493610.47.0.8493625.12.0.11709325.12.0.11709325.12.0.117093Update SSLR to v1.25.1.3886
renovate/sslrmaster1.25.1.38861.25.1.3886Update GitHub Actions dependencies (major)
renovate/major-github-actions-dependenciesmasterde0fac2e4500dabe0009e67214ff5f5447ce83ddb5d41d4e1d5dceea10e7104786b73624c18a190f043fb46d1a93c77aae656e7c1c64a875d1fc6a0a03ea5433c137af7c0495bc0cad1af10403fc800cUpdate Maven dependencies (major)
renovate/major-maven-dependenciesmaster7.0.76.0.38.0.111.0.21Update Sonar dependencies (major)
renovate/major-sonar-dependenciesmaster11.2.2.8545311.2.2.8545326.4.0.12186226.4.0.12186226.4.0.121862❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.
This PR was generated by Mend Renovate. View the repository job log.